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AMENDMENTS TO THE CLAIMS : JC17 R6C'rf PCl'/PfQ 2 U J UN 2005 

This listing of claims will replace all prior 
versions, and listings of claims in the application: 

LISTING OF CLAIMS : 

1. (original) Method of making secure the execution of a 
computer program (EXE) including a set of at least one 
instruction, which method is characterized in that it includes: 

- a first step (E30) , prior to the execution of the 
computer program, of calculating and storing a first signature 
(SIG1) representative of the intended execution of the set of 
instructions , 

- a second step (E50) , during the execution of the set of 
instructions, of calculating and storing a second signature 
(SIG2) representative of the execution of the set of 
instructions, and 

- a step (E60) of detecting an anomaly in the execution 
of the set of instructions on the basis of the first signature 
(SIG1) and the second signature (SIG2) . 

2. (original) Method according to claim 1, characterized 
in that the first calculation and storage step (E30) is executed 
during the generation of the instructions (Al, A13) of the 
computer program. 
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3 . (currently amended) Method according to claim 1 ea? 
claim 2 , characterized in that the second signature (SIG2) stored 
during the second calculation and storage step (E50) is retained 
in memory during the execution of at least one second instruction 
following the set of instructions. 

4. (currently amended) Method according to claim 1 aay 
one of claimo — 1 to 3 , characterized in that: 

- the first signature (SIG1) is obtained from the number 
of instructions in the set of instructions, 

- the second signature (SIG2) is obtained from the number 
of instructions from the set of instructions that have been 
executed, and in that 

- the detection step (E60) detects an execution anomaly 
when the first signature (SIG1) and the second signature (SIG2) 
are different after the execution of the set of instructions. 

5. (currently amended) Method according to claim 1 a*iy 
one of claims 1 to 3 , characterized in that: 

- the first signature (SIG1) is obtained from the number 
of instructions in the set of instructions, 

- the second signature (SIG2) is obtained from the number 
of instructions from the set of instructions that have not been 
executed, this second signature (SIG2) being calculated from the 
first signature (SIG1) , and in that 
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- the detection step (E60) detects an execution anomaly 
when the value of the second signature (SIG2) is not zero after 
the execution of the set of instructions. 

6. (original) Method according to claim 5, characterized 
in that an interrupt of the computer program is triggered when 
the value of the second signature (SIG2) is below a predetermined 
threshold. 

7. (currently amended) Method according to claim 5 oae 
claim 6 , characterized in that the first signature (SIG1) and the 
second signature (SIG2) are retained in memory during the 
execution of the program in the same register (REG1) . 

8. (currently amended) Method according to claim 1 any 
one of claims 1 to 3 , characterized in that: 

- the first signature (SIG1) is obtained from the code of 
a critical instruction of the set of instructions, 

- the second signature is obtained from the code of the 
critical instruction, that code being stored at the same time as 
or after the execution of the critical instruction, and in that 

- the detection step (E60) detects an execution anomaly 
when the first signature (SIG1) and the second signature (SIG2) 
are different after the execution of the set of instructions. 
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9. (currently amended) Method according to claim 1 a*iy 
one of claimo 1 to 3 , characterized in that: 

- the first signature (SIG1) is obtained from the address 
of a critical instruction of the set of instructions, the address 
being obtained during or after the generation of the executable 
code of the set of instructions, 

- the second signature (SIG2) is obtained from the 
address of the critical instruction, that address being stored 
(E30) at the same time as or after the execution (E30) of the 
critical instruction, and 

- the detection step (E60) detects an execution anomaly 
when the first signature (SIG1) and the second signature (SIG2) 
are different after the execution of the set of instructions. 

10 . (currently amended) Method according to claim 8 oae 
claim 9 , characterized in that the critical instruction is a jump 
instruction (JMP, JNZ, CJNE, JZ) . 

11. (currently amended) Method according to claim 1 any 
one of claimo 1 to 3 , characterized in that: 

- the first signature (SIG1) and the second signature 
(SIG2) are error detector codes (CRC1, CRC2) calculated from the 
code or from an address of an instruction of the set of 
instructions, and in that 

- the detection step (E60) detects an execution anomaly 
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when the first signature (SIG1) and the second signature (SIG2) 
are different after the execution of the set of instructions. 

12 . (original) Method according to claim 11, 
characterized in that the error detector codes (CRC1, CRC2) are 
cyclic redundancy check codes. 

13 . (original) Method according to claim 11, 
characterized in that the error detector codes are obtained by 
the logical combination (XOR) of the code or an address of at 
least one instruction of the set of instructions. 

14. (currently amended) Method according to claim 1 a**y 
one of claima 1 to 3 , characterized in that: 

- the first signature (SIG1) and the second signature 
(SIG2) are respectively obtained during the generation and the 
execution of the instructions from at least two elements chosen 
from: 

. the number of instructions in the set of instructions, 
. the code of at least one instruction of the set of 
instructions , 

. the address of at least one instruction of the set of 
instructions, and 

. an error detector code calculated from the code or an 
address of at least one critical instruction of the set of 
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instructions, the address being obtained during or after the 
generation of the executable code of the set of instructions, and 
in that 

- the detection step (E60) detects an execution anomaly 
when the first signature (SIG1) and the second signature (SIG2) 
are different after the execution of the set of instructions. 

15. (currently amended) Method according to claim 1 afty 
one of claimo 1 to 11 , characterized in that it includes a step 
(E70) of destroying at least a portion of the system on which the 
computer program is executed, this step of destroying being made 
when an execution anomaly is detected in the detection step. 

16. (currently amended) Method according to claim 1 any 
one of claima 1 to 15 , characterized in that the first signature 
(SIG1) is generated automatically (E30) . 

17 . (original) Device for processing a computer program 
including a set of at least one instruction, characterized in 
that it includes means (12) for calculating and storing the first 
signature (SIG1) representative of the intended execution of the 
set of instructions prior to the execution thereof. 

18 . (original ) Device according to claim 17, 
characterized in that the means (12) for calculating and storing 
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the first signature (SIG1) are adapted to calculate and store 
information obtained from the number of instructions of the set 
of instructions. 

19 . (original) Device according to claim 17, 
characterized in that the means (12) for calculating and storing 
the first signature (SIG1) are adapted to obtain and store 
information obtained from the code of a critical instruction of 
the set of instructions. 

20. (currently amended) Device according to claim 17 afiy 
one of claimo 17 to 19 , characterized in that it further includes 
means (14) for generating executable code from the computer 
program (SOURCE) . 

21 . (original) Device according to claim 20, 
characterized in that the means for calculating and storing the 
first signature (SIG1) are adapted to obtain and store 
information obtained from the address of a critical instruction, 
the information being obtained of the set of instructions by the 
means (14) for generating executable code. 

22 . (currently amended) Device according to claim 19 e*? 
claim 21 , characterized in that the critical instruction is a 
jump instruction (JMP, JNZ , CJNE, JZ) . 
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23 . (original) Device according to claim 17, 
characterized in that the means (12) for calculating and storing 
the first signature (SIG1) are adapted to calculate and store 
information obtained from an error detector code (CRC1) 
calculated from the code or an address of at least one 
instruction of the set of instructions. 

24 . (original) Device according to claim 23, 
characterized in that the error detector code (CRC1) is a cyclic 
redundancy check code . 

25 . (original) Device according to claim 23, 
characterized in that the error detector code is obtained by a 
logical combination (XOR) of the code or an address of at least 
one instruction of the set of instructions. 

26 . (original) Device for making secure the execution of 
a computer program including a set of instructions comprising at 
least one instruction, which device is characterized in that it 
includes : 

- a first register (REG1) for storing a first signature 
(SIG1) representative of the intended execution of the set of 
instructions , 

- means (22) for calculating and storing in a second 
storage register (REG2) during the execution of the set of 
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instructions a second signature (SIG2) representative of the 
execution of the set of instructions, and 

- means (24) for detecting an anomaly in the execution of 
the set of instructions on the basis of the first signature 
(SIG1) and the second signature (SIG2) . 

27 . (original) Device according to claim 26, 
characterized in that the calculation and storage means are 
adapted to retain the second signature (SIG2) in the second 
register (REG2) during the execution of at least one second 
instruction following the set of instructions. 

28. (currently amended) Device according to claim 26 ea? 
claim 27 , characterized in that, the first signature (SIG1) being 
obtained from the number of instructions of the set of 
instructions, the second signature (SIG2) calculated and stored 
by the calculation and storage means (22) is obtained from the 
number of instructions of the set of instructions that have been 
executed and in that the detection means (24) detect an execution 
anomaly when the first signature (SIG1) and the second signature 
(SIG2) are different after the execution of the set of 
instructions . 

29. (currently amended) Device according to claim 26 es? 
claim 27 , characterized in that, the first signature (SIG1) being 



11 



Docket No. 0579-1097 



obtained from the number of instructions of the set of 
instructions, the second signature (SIG2) calculated and stored 
by the calculation and storage means (22) is obtained from the 
number of instructions of the set of instructions that have not 
been executed, this second signature (SIG2) being calculated from 
the first signature (SIG1) , and the in that detection means (24) 
detect an execution anomaly when the value of second signature 
(SIG2) is not zero after the execution of the set of 
instructions . 

30 . (original) Device according to claim 29, 
characterized in that it further includes means for triggering an 
interrupt of the computer program when the value of the second 
signature (SIG2) is below a predetermined threshold. 

31 . (currently amended) Device according to claim 29 eae 
claim 30 , characterized in that the first signature (SIG1) and 
the second signature (SIG2) are stored in the first register 
(REG1) during the execution of the program. 

32. (currently amended) Device according to claim 26 ea? 
claim 27 , characterized in that, the first signature (SIG1) being 
obtained from the code of a critical instruction of the set of 
instructions, the second signature (SIG2) calculated and stored 
by the calculation and storage means (22) is obtained from the 
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code of the critical instruction, the code being stored at the 
same time as or after the execution of the critical instruction, 
and in that the detection means (24) detect an execution anomaly 
when the first signature (SIG1) and the second signature (SIG2) 
are different after the execution of the set of instructions. 

33. (currently amended) Device according to claim 26 ea? 
claim 27 , characterized in that, the first signature (SIG1) being 
obtained from the address of a critical instruction of the set of 
instructions, the second signature (SIG2) calculated and stored 
by the calculation and storage means (22) is obtained from the 
address of the critical instruction, that address being stored at 
the same time as or after the execution of the critical 
instruction, and in that the detection means detect an execution 
anomaly when the first and second signatures are different after 
the execution of the set of instructions. 

34 . (currently amended) Device according to claim 32 oa? 
claim 33 , characterized in that the critical instruction is a 
jump instruction (JMP, JNZ, CJNE, JZ) . 

35 . (currently amended) Device according to claim 26 ea? 
claim 27 , characterized in that, the first signature (SIG1) and 
the second signature (SIG2) being error detector codes (CRC1, 
CRC2) calculated from the code of an instruction of the set of 
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instructions, the detection means (24) detect an execution 
anomaly when the first signature (SIG1) and the second signature 
(SIG2) are different after the execution of the set of 
instructions . 

36 . (original) Device according to claim 35, 
characterized in that the error detector codes (CRC1, CRC2) are 
cyclic redundancy check codes. 

37 . (original) Device according to claim 35, 
characterized in that the error detector codes are obtained by a 
logical combination (XOR) of the code or an address of at least 
one instruction of the set of instructions. 

38 . (currently amended) Device according to claim 26 or 
claim 27 , characterized in that, the first signature (SIG1) being 
obtained from at least two elements chosen from: 

- the number of instructions of the set of instructions, 

- the code of at least one instruction of the set of 
instructions, 

- the address of at least one instruction of the set of 
instructions, and 

- an error detector code calculated from the code or the 
address of at least one instruction of the set of instructions, 

the second signature (SIG2) calculated and stored by the 
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calculation and storage means (22) is obtained in a similar 
manner from the at least two elements during the execution of the 
instructions and in that the detection means (24) detect an 
execution anomaly when the first signature (SIG1) and the second 
signature (SIG2) are different after the execution of the set of 
instructions . 

39. (currently amended) Device according to claim 26 aay 
one of claimo 2G to 38 , characterized in that it further includes 
means for destroying at least a portion of the computer program. 

40 . (current ly amended) Microcircuit card characterized 
in that it includes a securing device (100) according to claim 26 
any one of claimo 2 6 to 39 . 
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